$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G90iElFBEsOIFSyt6h4iAYdPhUY.roa File: G90iElFBEsOIFSyt6h4iAYdPhUY.roa (raw, json) Hash identifier: f8fJUDjAZs9fmkcKbNZ0eRHM/CitGbvZLhsVjDu2B3Q= Subject key identifier: 1B:DD:22:12:51:41:12:C3:88:15:2C:AD:EA:1E:22:01:87:4F:85:46 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 2A65 Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G90iElFBEsOIFSyt6h4iAYdPhUY.roa Signing time: Fri 01 Sep 2023 10:07:51 +0000 ROA not before: Fri 01 Sep 2023 10:07:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 38841 IP address blocks: 118.233.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 01:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10853 (0x2a65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Sep 1 10:07:51 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=1BDD2212514112C388152CADEA1E2201874F8546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:c0:9e:3c:89:9e:30:76:33:24:f8:83:57: b0:37:8a:9a:12:76:c2:6f:23:73:ca:70:08:ae:4c: 65:31:0f:11:0a:a9:3d:70:14:a8:99:f3:5f:3a:89: 05:36:5b:2d:f6:b0:6c:ca:13:ea:77:06:22:4f:50: 35:d2:9d:5e:3f:55:31:00:6a:4e:20:34:71:57:37: 30:00:c7:41:ce:04:12:62:09:b5:a4:1e:8e:05:86: 84:f1:f3:a9:80:0b:25:7a:37:70:73:1d:a9:44:75: 7f:80:61:78:1a:15:4a:0a:15:9f:53:e1:04:ee:ab: d7:91:28:88:89:c7:0d:05:c2:b9:0d:ba:1c:fc:e4: 4d:c7:e0:47:38:ea:94:bf:76:af:80:69:d9:2f:d8: 49:d7:fe:a3:68:50:e1:82:7f:66:3d:94:97:7e:61: 28:20:48:66:7e:e0:a8:be:28:81:a5:60:5a:55:b5: f5:16:24:53:76:f8:83:1f:0e:07:e8:77:ef:b3:37: 4a:c9:e6:ab:01:0f:cb:de:a1:d4:f5:66:9a:ba:d7: 47:81:12:0b:93:d0:1e:f8:bb:8a:61:06:de:03:ef: 47:27:50:ab:07:2e:e1:af:ef:c5:38:62:7b:d2:46: d8:5d:2a:52:4c:68:d4:84:65:77:c1:e5:f1:ae:b7: ed:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DD:22:12:51:41:12:C3:88:15:2C:AD:EA:1E:22:01:87:4F:85:46 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G90iElFBEsOIFSyt6h4iAYdPhUY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.233.246.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:4a:a6:16:01:62:44:67:d6:88:58:ad:f7:8e:33:88:f7:4d: 2a:6d:79:52:86:d6:6b:88:92:c8:9c:9a:2f:44:3e:a3:f5:9e: e5:10:a3:49:54:9a:33:e9:68:ce:ab:24:84:5d:ea:25:6e:ef: 00:6d:b9:61:88:0e:02:04:7f:1b:3c:23:7f:43:03:ab:86:17: 0a:d7:dd:57:38:d1:ed:4f:c9:1c:c8:db:87:e4:59:f3:52:41: e3:ea:c7:09:8a:43:5f:ae:09:ad:da:bf:51:87:c9:27:58:2c: 42:ce:fa:1a:35:9c:3c:86:33:22:5b:04:94:be:52:fb:09:7b: 46:e1:f4:e5:0b:5a:b1:0a:7b:27:2b:58:c1:18:cd:0d:47:58: f3:8a:96:83:0a:47:0a:ed:6a:a1:e1:41:ad:ed:39:59:57:1d: e5:60:95:48:a2:19:ea:7b:25:16:5f:7e:5a:0e:7c:39:75:63: 95:35:03:98:0b:00:ad:aa:b5:2e:0a:62:52:70:29:e9:1a:22: 54:f9:3f:59:a4:fe:38:de:39:ef:48:d1:90:e2:7e:b7:7a:f8: a9:cf:58:9b:21:fc:4d:4e:15:78:de:23:f7:5f:b2:b5:49:ad: d2:c9:be:0e:58:81:67:ae:3f:b6:14:fc:45:05:d3:67:8a:4d: 3a:be:72:50 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICKmUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx MDA3NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFCREQyMjEyNTE0MTEy QzM4ODE1MkNBREVBMUUyMjAxODc0Rjg1NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJRMCePImeMHYzJPiDV7A3ipoSdsJvI3PKcAiuTGUxDxEKqT1w FKiZ8186iQU2Wy32sGzKE+p3BiJPUDXSnV4/VTEAak4gNHFXNzAAx0HOBBJiCbWk Ho4FhoTx86mACyV6N3BzHalEdX+AYXgaFUoKFZ9T4QTuq9eRKIiJxw0FwrkNuhz8 5E3H4Ec46pS/dq+Aadkv2EnX/qNoUOGCf2Y9lJd+YSggSGZ+4Ki+KIGlYFpVtfUW JFN2+IMfDgfod++zN0rJ5qsBD8veodT1Zpq610eBEguT0B74u4phBt4D70cnUKsH LuGv78U4YnvSRthdKlJMaNSEZXfB5fGut+0rAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUG90iElFBEsOIFSyt6h4iAYdPhUYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0c5MGlFbEZCRXNPSUZTeXQ2 aDRpQVlkUGhVWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2 6fYwDQYJKoZIhvcNAQELBQADggEBACtKphYBYkRn1ohYrfeOM4j3TSpteVKG1muI ksicmi9EPqP1nuUQo0lUmjPpaM6rJIRd6iVu7wBtuWGIDgIEfxs8I39DA6uGFwrX 3Vc40e1PyRzI24fkWfNSQePqxwmKQ1+uCa3av1GHySdYLELO+ho1nDyGMyJbBJS+ UvsJe0bh9OULWrEKeycrWMEYzQ1HWPOKloMKRwrtaqHhQa3tOVlXHeVglUiiGep7 JRZffloOfDl1Y5U1A5gLAK2qtS4KYlJwKekaIlT5P1mk/jjeOe9I0ZDifrd6+KnP WJsh/E1OFXjeI/dfsrVJrdLJvg5YgWeuP7YU/EUF02eKTTq+clA= -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:04 2024 by rpki-client on console-fra.rpki-client.org